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SUBJECT: 


Guidance on the Collection and Audit Trail Requirements for 
Electronically Generated Forms 1-9 


In the course of Employment Eligibility Verification Form 1-9 inspections, Homeland Security 
Investigations (HSI) special agents and auditors are increasingly encountering businesses that 
utilize electronically generated Forms 1-9. This memorandum provides guidance to the HSI field 
offices on the collection of electronically generated Forms 1-9 and the minimum electronic audit 
trail requirements for use in contemplating civil fines. 

On August 23, 2010, U.S. Immigration and Customs Enforcement’s Electronic Signature and 
Storage of Form 1-9, Employment Eligibility Verification Final Rule (Rule) went into effect. In 
summary, the Rule amended regulations to allow employers to complete and store electronically 
generated Forms 1-9. The Rule also made modifications to 8 CFR 274a.2 regarding the 
requirement for audit trails. Now, whenever an electronic Form 1-9 record is created, completed, 
updated, modified, altered or corrected, a secure and permanent record must be created (audit trail) 
that establishes the date accessed, who accessed it and what action was taken. Further, the Rule 
outlined specific standards for systems creating electronically generated Forms 1-9. In order to 
properly inspect electronically generated Forms 1-9 for compliance with these regulations, special 
agents and auditors are provided the following guidance on what infomiation to eollect from the 
employer at the time of inspection and what a minimum audit trail should include. 

In addition to the audit trail itself, special agents and auditors must ensure that the proper 
documents are obtained for electronieally generated Forms 1-9 to be inspected for compliance. 
Upon service of a Notice of Inspection, special agents or auditors must request the name of the 
software product being utilized and any internal business practices and protocols related to the 
generation of, use of, storage of, security of, and inspection and quality assurance programs for 
the electronically generated Forms 1-9. 
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The business or entity being inspected should also provide the indexing system identifying how 
the electronic information contained in the Form 1-9 is linked to each employee and 
documentation of the system used to capture the electronic signature, including the identity and 
attestation of the individual electronically signing the Form 1-9. 

When determining whether audit trails for electronically generated Forms 1-9 are in compliance 
with 8 CFR 274a.2(e)(8)(i), 274a.2(f)(l)(iii) and 274a.2(g)(l)(iv), special agents or auditors 
should reference the attached flow chart and audit trail that illustrate the minimum acceptable 
standards for electronically generated Forms 1-9 (see attachment). Additionally, special agents or 
auditors shall request at least one printed completed electronically generated Form 1-9 to ensure 
compliance with the regulation. Finally, it is recommended that special agents or auditors 
request access to the system for a demonstration of the generation of an electronic Form 1-9. 


Please forward the attached policy to all HSI personnel within your area of responsibility and 
ensure that it is implemented i mmediately. Ques tions regarding this guidance should be directed 

to| (b)(6) |at[ (b)(6) I or 


{b){6) 
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Electronic Form 1-9 Actions Requiring Audit Trail Documentation 


All electronically generated Form 1-9 audit trails must provide the date and time of access to the 
Form 1-9, the identity of the individual accessing the Form 1-9, and the action being taken by 
that individual on the Form 1-9. This information should be presented in a logical, organized, 
easily accessible manner. What HSI considers as an action is outlined in the flow chart boxes 1- 
15 below. 
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Sample Acceptable Electronic Form 1-9 Audit Trail 
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ACTION 
1-9 CREATED 

1. Log-in 

2. Initiation of the Form 1-9 and Association 
of the Form 1-9 for an Employee 

1-9 COMPLETED 

3. Employee Personal Information Input 

4. Employee Attestation 

5. Alien Registration Number or Work 
Authorization Document Number 

(if applicable) 

6. Employee Signature 

7. Employee Signature Date 

8. Preparer / Translator Certification 
(if applicable) 

9. Input of A or B and C document(s) to 
include Title, Number, and Expiration Date 

10. Employer Signature 

11. Employer Signature Date 

1-9 UPDATES 

12. Documentation of A or B and C 
document(s) to include the Title, Number 
and Expiration Date 

13. Employer Signature 

14. Employer Signature Date 

1-9 MODIFIED/ALTERED/CORRECTED 

15. Any changes made after completion of 
Section 1,2 or 3 of the Form 1-9 



